サポートと今すぐチャット
サポートとのチャット

NetVault 13.0.3 - Administration Guide

Introduction Getting started Configuring clients Managing catalog search Configuring storage devices
About storage devices SAN considerations Quest DR Series systems Quest QoreStor NetVault SmartDisk EMC Data Domain Systems Snapshot Array Manager Virtual Tape Libraries Virtual standalone drives Shared Virtual Tape Libraries Physical tape devices Storage tiers
Backing up data Managing policies Restoring data Managing NetVault dashboard Managing jobs Monitoring logs Managing storage devices
Monitoring device activity Managing disk-based storage devices in list view Managing disk-based storage devices in tree view Managing the Snapshot Array Manager Managing tape libraries in list view Managing tape libraries in tree view Managing tape drives in list view Managing tape drives in tree view Adding shared devices
Managing storage media Managing user and group accounts Monitoring events and configuring notifications Reporting in NetVault Working with client clusters Configuring default settings for NetVault
About configuring default settings Configuring encryption settings Configuring plug-in options Configuring default settings for post-scripts Configuring default settings for Verify Plug-in Configuring Deployment Manager Settings Configuring Job Manager settings Configuring Logging Daemon settings Configuring Media Manager settings Configuring Network Manager settings Configuring Process Manager settings Configuring RAS device settings Configuring Schedule Manager settings Configuring Web Service settings Configuring Auditor Daemon settings Configuring firewall settings Configuring general settings Configuring security settings Synchronizing NetVault Time Configuring default settings for global notification methods Configuring the reporting utility Configuring NetVault WebUI default settings Configuring NetVault to use a specific VSS provider Configuring default settings using Txtconfig
Diagnostic tracing Managing diagnostic data Using the deviceconfig utility NetVault processes Environment variables Network ports used by NetVault Troubleshooting
Common errors
NetVault Service fails to start on Windows NetVault Service fails to start after the machine is restarted NetVault Service starts, but stops immediately on Linux Login fails after any change in the server IP address Unexpected behavior of NetVault WebUI WebUI does not run in Compatibility View in Internet Explorer NetVault installer fails during push installation VSS-based backup fails Modifying TCP/IP socket buffer size on Windows Restores using Data Copy savesets fail on clients running NetVault 10.0.1 Restore fails on Itanium platforms if the index is larger than 2GB After upgrade, Data Copy and Consolidated backup job on Linux fails After upgrade, console error is displayed on WebUI pages Deployment task hangs on target Linux machine during push installation. Unable to add package store with hostname. Deployment task fails due to network configuration issues. Domain user is unable to login NetVault Server if the workstation attribute is set. Domain user is unable to login NetVault Server on Debian 9. Adding the target machine as a client fails, after successful push installation. Unable to install, uninstall or navigate catalog search page after manually uninstalling NetVault Client Host. Unable to install, uninstall catalog search on client after NetVault Server migration with the same or different server name External Azure AD user cannot add an external Azure AD user to NetVault Server Failed to verify target Windows machine from a Linux-based NetVault Server NetVault is unable to send reports as an email attachment in PDF format on RHEL 5.x platform Restore fails on NetVault Database backup When using RDA for backups, only four streams are used at once Unable to create large VTL on Linux Browsing a folder with a large number of files times out
Safe Mode in NetVault

Predefined Presets

•
Administrator: This role allows the user to administer NetVault and perform all functions in NetVault.
•
Backup Administrator: This role allows the user to administer backup and restore jobs and perform device- and media-related functions.
•
Backup Operator: This role allows the user to run and manage backup jobs. This role also allows the user to administer restore jobs.
•
Helpdesk: This role allows the user to perform restore jobs.
•
Media Operator: This role allows the user to perform device- and media-related functions.
•
Monitor: This role allows the user to monitor clients, devices, jobs, and storage media.

The following table lists the privileges included in the predefined Presets.

 
Table 104. Predefined Presets
Privilege
Administrator
Backup Administrator
Backup Operator
Helpdesk
Media Operator
Monitor

Clients — Add/remove clients

X

 

 

 

 

 

Clients — Add/remove virtual/clustered clients

X

 

 

 

 

 

Clients — Administer client groups

X

 

 

 

 

 

Clients — Configure client

X

 

 

 

 

 

Clients — Get client properties

X

X

X

X

 

X

Clients — Set firewall relationship

X

X

 

 

 

 

Device — Add or Update Snapshot Array

X

X

 

 

 

 

Devices — Add libraries

X

X

 

 

 

 

Devices — Add Random Access Store

X

X

 

 

 

 

Devices — Add simple drives

X

X

 

 

 

 

Devices — Clean drives

X

X

 

 

X

 

Devices — Manage devices

X

X

 

 

 

 

Devices — Open and close entry/exit ports

X

X

 

 

X

 

Devices — Open and close library doors

X

X

 

 

X

 

Devices — Perform device checks

X

X

 

 

X

X

Devices — Reconfigure devices

X

X

 

 

 

 

Devices — Remove devices

X

X

 

 

 

 

Devices — Set drive cleaning properties

X

X

 

 

X

 

Devices — Update Random Access Store

X

X

 

 

 

 

Jobs — Abort jobs

X

X

X

 

 

 

Jobs — Acknowledge policy errors

X

X

X

 

 

 

Jobs — Administer backup/restore sets

X

X

X

X

 

 

Jobs — Administer policies

X

X

 

 

 

 

Jobs — Delete job

X

X

 

 

 

 

Jobs — Delete scheduled phase

X

X

X

 

 

 

Jobs — Hold job

X

X

X

 

 

 

Jobs — Jobs owned by this user may run

X

X

X

X

 

 

Jobs — Quiesce policy

X

X

X

 

 

 

Jobs — Restart job

X

X

X

 

 

 

Jobs — Resume job

X

X

X

 

 

 

Jobs — Run predefined jobs instantly

X

X

X

X

 

 

Jobs — Stop Job

X

X

X

 

 

 

Jobs — Submit/update backup jobs

X

X

X

 

 

 

Jobs — Submit/update restore jobs

X

X

X

X

 

 

Jobs — View backup jobs

X

X

X

X

 

X

Jobs — View backup/restore sets

X

X

X

X

 

X

Jobs — View policies

X

X

X

X

 

X

Jobs — View restore jobs

X

X

X

X

 

X

Media — Blank ANSI media

X

X

 

 

X

 

Media — Blank bad media

X

X

 

 

X

 

Media — Blank media

X

X

 

 

 

 

Media — Blank non-NetVault media

X

X

 

 

 

 

Media — Export media

X

X

 

 

X

 

Media — Get media or device item status

X

X

 

 

X

 

Media — Import media

X

X

 

 

X

 

Media — List media

X

X

X

X

X

X

Media — Load/unload media from drives

X

X

X

 

X

 

Media — Manage media requests

X

X

 

 

X

 

Media — Mark media for re-use

X

X

 

 

X

 

Media — Modify backup expiry data

X

X

 

 

X

 

Media — Remove media

X

X

 

 

X

 

Media — Scan foreign media

X

X

 

 

X

 

Media — View and diagnose media requests

X

X

X

 

X

X

Media — View backup expiry data

X

X

 

 

X

 

Media — View media properties

X

X

X

 

X

X

Media — Write media labels

X

X

 

 

X

 

Reports — Modify/edit report Jobs and components

X

X

 

 

 

X

Reports — View and run reports

X

X

 

 

 

X

Storage Tier — Administer storage tier

X

X

 

 

X

 

Storage Tier — List storage tier

X

X

X

 

X

X

System — Change global notification

profile

X

X

 

 

 

 

System — Dump log entries

X

X

X

 

 

 

System — Install/remove software packages

X

 

 

 

 

 

System — Install license

X

 

 

 

 

 

System — Manage dashboards

X

 

 

 

 

 

System — Permitted to use CLI tools

X

X

 

 

 

 

System — Purge log entries

X

X

 

 

 

 

System — View dashboards

X

X

X

X

X

X

Users — Administer user accounts

X

 

 

 

 

 

Users — Reset password for user

X

 

 

 

 

 

Integrating Active Directory with NetVault

NetVault installed on a Windows or Linux machine can communicate with Microsoft Active Directory (AD). Additionally, NetVault installed on a Linux machine can communicate with OpenLDAP Directory Services and Samba Active Directory. Integrating AD with NetVault enables role-based access control in NetVault. It lets users log in to NetVault using their AD credentials. It also lets AD users manage NetVault users.

 
* 
NOTE: NetVault Server supports Secure Light Directory Access Protocol (LDAPS) protocol for both Microsoft Active Directory (AD) and OpenLDAP Directory.
 
* 
IMPORTANT: During Active Directory integration with NetVault, the Active Directory service must always be available. Additionally, the NetVault Server should be a member of the domain.

Adding an AD group to NetVault and specifying privileges, levels of access, and notifications for the group ensures that members of the group have the corresponding access from the first time that they log on.

•
Considerations for Linux-based NetVault
•
Managing AD users
•
Managing AD groups

Considerations for Linux-based NetVault

Before you integrate Active Directory (AD) with a Linux-based installation of NetVault, consider the following conditions and prerequisites:

•
To let the Linux server communicate with AD, integrate NetVault with the domain controller using Samba Winbind or System Security Services Daemon (SSSD).
•
Host name of the Linux machine should be set to its FQDN. (For example, mymachine.mydomain.com)
•
Enable the use of fully qualified domain names on the Linux machine on which NetVault is installed. Short names are not permitted.
•
Samba Winbind: Under the [global] section, smb.conf must have the following entry:
winbind use default domain = no
•
SSSD: under the [domain/<domain name>] section, sssd.conf must have the following entry:
use_fully_qualified_names = True
•
On the Linux machine where NetVault is installed, to retrieve all domain controller groups, enable enumeration of group databases.
•
Samba Winbind: Under the [global] section, smb.conf must have the following entry:
winbind enum groups = yes
•
SSSD: Under the [domain/<domain name>], to retrieve domain controller groups and to fetch groups from child and trusted domains, respectively, the sssd.conf must have the following entries:
enumerate = True
subdomain_enumerate = all
•
While logging in or adding a domain user, using the DNS suffix with the domain name is recommended; for example, domain.local\user or username@dns.local.
•
When logging in using an Active Directory (AD) user on RHEL 8.x, add the following parameters, and then restart the SSSD service:
•
In the /etc/pam.d/passwd file, add:
auth include system-auth
account include system-auth
•
In the /etc/sssd/sssd.conf file, add:
auth_provider = ad
ad_gpo_access_control = permissive

Managing AD users

The following list identifies what various users can and cannot do within NetVault as it pertains to Active Directory (AD):

•
When an AD user logs in using an AD login, such as a domain name followed by the user name or a name that contains the @ symbol, NetVault authenticates the login against Active Directory. This behavior lets an AD user log in to NetVault even without a local NetVault account.
•
If authentication succeeds and this is the first time that the user is logging in, NetVault takes one of the following actions:
•
If a corresponding AD group exists in NetVault, NetVault adds the user and assigns the user the privileges, access levels, and notification settings that are defined for the corresponding AD group.
•
If the user does not have a NetVault account, NetVault adds the user but excludes all privileges, access levels, and notification settings. When the local NetVault Administrator logs in, the administrator can view the AD user entry and assign the applicable privileges.
•
NetVault automatically fetches the respective user details from the domain controller and stores it locally in the NetVault database. In case of secure mode, the details are fetched from domain controller and overwritten in the NetVault database on every successful login.
 
•
If authentication fails, NetVault displays an error message and prevents the user from logging in.
•
All NetVault administrators can view all local and AD NetVault users.
•
An AD NetVault user with administrative privileges can add authenticated AD users; a local NetVault Administrator cannot.
•
An AD NetVault user with administrative privileges can rename an existing NetVault user to an authenticated AD NetVault user; a local NetVault Administrator cannot. You must ensure that the password fields remains empty to maintain the integrity of the user’s AD password.
•
Once the AD user is added in NetVault, it cannot be renamed to any other user name.
•
No one can change an AD user’s password or set the password to use the Password never expires option.
•
A local NetVault Administrator or an AD NetVault user with administrative privileges can change user-based information that is accessed by using the Modify Details option as this information is stored in the NetVault Database. However, if the secure mode is enabled, the NetVault administrator and other users are allowed to edit or change only E-mail 2 and E-mail 3 of an AD NetVault user.
* 
NOTE: On Windows based NetVault Server, if the Workstation attribute is set for a user in the AD database, then NetVault fetches that information and stores it against the Workstation in the user details. If the user has multiple workstations, they display as separated by commas. If you want the AD user with the Workstation attribute set in AD to log in to the NetVault Server, then the user must specify the NetVault Server in the AD Workstations list.

On Linux-based NetVault Server, the workstation field cannot be fetched, hence the user is unable to login. We recommended that workstation should not be set in AD for Linux Server.

An administrator can perform the following tasks in NetVault:

•
Adding an AD user
•
Deleting an AD user
関連ドキュメント

The document was helpful.

評価を選択

I easily found the information I needed.

評価を選択